This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json) Hash identifier: 1FqUp2qoNUDOlfhsspkTOJca1SotZochmv8HIGYJaJk= Subject key identifier: 4D:08:4B:97:65:23:C8:F4:0D:A6:7C:C6:80:15:4E:C5:DA:2D:0F:BE Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce Certificate serial: 019B3CB4B15A54B8F3BC877B347BADE35E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft Manifest number: 0E70 Signing time: Sat 20 Dec 2025 17:00:33 +0000 Manifest this update: Sat 20 Dec 2025 17:00:33 +0000 Manifest next update: Sun 21 Dec 2025 17:00:33 +0000 Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=) 2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: fgYs0qJdlq2Y94ZSRwm6WeAUkir97tC1woZe54iBJw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b1:5a:54:b8:f3:bc:87:7b:34:7b:ad:e3:5e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce Validity Not Before: Dec 20 17:00:33 2025 GMT Not After : Dec 21 17:00:33 2025 GMT Subject: CN=4d084b976523c8f40da67cc680154ec5da2d0fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:06:a4:cd:38:d9:b9:8e:99:ee:31:bc:80: c9:6d:eb:12:38:96:36:35:07:08:97:39:ef:26:72: 4c:9a:62:97:fa:fb:f9:18:2c:f6:3a:cf:bb:ef:bd: f6:b2:b0:5d:bc:68:3b:16:39:4d:8c:76:28:9d:ce: cd:fc:45:4a:27:0a:93:dc:8e:cd:33:15:c9:4b:6b: 2b:d6:ed:cf:32:d9:00:b9:26:ed:f7:ed:7a:e3:05: 18:79:44:f3:8b:78:e6:82:e6:f1:8b:4d:9d:05:b7: 09:05:4a:bc:ec:7c:51:31:6d:92:fc:d7:1c:7f:4b: 23:16:29:ca:d3:59:5b:42:0c:34:27:c9:c6:4c:57: 40:be:e8:af:56:bb:15:e4:32:ae:21:54:ef:3c:88: cc:f7:0f:83:0b:ae:67:70:df:6c:6d:9e:cf:15:de: 97:4e:b9:d1:ef:95:0b:34:aa:3b:42:9a:b1:ec:c1: 7c:9c:26:df:a1:69:92:23:89:9f:02:48:5b:f0:d8: 3f:00:70:fb:a9:21:63:a4:f9:c4:8a:2e:37:1b:e2: d5:2c:fd:35:6f:45:d0:2d:24:93:7f:ef:76:04:97: 65:6c:d5:09:24:b1:6f:43:70:f9:9f:0e:19:0e:1c: 88:7b:b2:4d:a4:9f:ec:f9:c5:9e:6a:74:49:46:85: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:4B:97:65:23:C8:F4:0D:A6:7C:C6:80:15:4E:C5:DA:2D:0F:BE X509v3 Authority Key Identifier: keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d1:12:cf:e3:84:65:b7:95:f9:c5:5b:12:f1:a6:70:0c:66: 09:ef:be:fb:d7:b2:41:16:e4:16:be:48:b8:ed:2d:3e:4e:d7: 82:38:04:82:e3:9e:9f:99:9e:e1:ac:84:2a:ad:43:22:27:eb: 43:db:a0:ad:69:d9:b2:70:88:e7:ee:84:ff:6f:ac:49:39:5b: 9c:62:05:c7:73:e4:5e:a3:4b:ae:6f:a7:a0:34:3b:40:c4:42: dd:2b:54:8a:26:82:b0:93:43:ff:f6:99:22:98:35:09:dc:52: 44:e9:54:e6:81:99:6a:da:1a:ca:db:db:34:cd:11:a1:37:fd: 14:8b:c9:8d:ff:dd:23:d4:0f:d1:28:85:c4:b6:42:fc:da:eb: 41:a6:a2:a9:e1:cd:48:18:66:4c:a0:23:70:58:f5:33:84:94: 15:a2:88:81:43:ed:59:87:c5:6b:50:44:6a:ae:04:c9:ac:49: 26:8b:76:50:23:e3:ea:42:a4:14:a4:87:83:f4:18:9f:91:03: b6:81:1f:b8:6f:10:36:5f:48:ea:1b:75:37:cf:7d:19:f9:36: 03:11:b3:66:06:70:a6:4d:fa:b2:26:93:64:bf:1e:bf:db:d7: cb:ae:f6:e9:30:c2:b4:87:1e:0b:3a:b7:51:23:8a:fc:69:24: 2e:91:00:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLFaVLjzvId7NHut415KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDA3ZTgwNWE1MmM1MzRjYzZkMzM0NTA1NzVmZjAyMzll ODA3Y2UwHhcNMjUxMjIwMTcwMDMzWhcNMjUxMjIxMTcwMDMzWjAzMTEwLwYDVQQD Eyg0ZDA4NGI5NzY1MjNjOGY0MGRhNjdjYzY4MDE1NGVjNWRhMmQwZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrwGpM042bmOme4xvIDJbesSOJY2 NQcIlznvJnJMmmKX+vv5GCz2Os+77732srBdvGg7FjlNjHYonc7N/EVKJwqT3I7N MxXJS2sr1u3PMtkAuSbt9+164wUYeUTzi3jmgubxi02dBbcJBUq87HxRMW2S/Ncc f0sjFinK01lbQgw0J8nGTFdAvuivVrsV5DKuIVTvPIjM9w+DC65ncN9sbZ7PFd6X TrnR75ULNKo7Qpqx7MF8nCbfoWmSI4mfAkhb8Ng/AHD7qSFjpPnEii43G+LVLP01 b0XQLSSTf+92BJdlbNUJJLFvQ3D5nw4ZDhyIe7JNpJ/s+cWeanRJRoWC5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0IS5dlI8j0DaZ8xoAVTsXaLQ++MB8GA1UdIwQY MBaAFBPQfoBaUsU0zG0zRQV1/wI56AfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTkt YWQ3ZjkyNjJhN2MyLzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTktYWQ3ZjkyNjJhN2My LzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtESz+OE ZbeV+cVbEvGmcAxmCe+++9eyQRbkFr5IuO0tPk7XgjgEguOen5me4ayEKq1DIifr Q9ugrWnZsnCI5+6E/2+sSTlbnGIFx3PkXqNLrm+noDQ7QMRC3StUiiaCsJND//aZ Ipg1CdxSROlU5oGZatoaytvbNM0RoTf9FIvJjf/dI9QP0SiFxLZC/NrrQaaiqeHN SBhmTKAjcFj1M4SUFaKIgUPtWYfFa1BEaq4EyaxJJot2UCPj6kKkFKSHg/QYn5ED toEfuG8QNl9I6ht1N899Gfk2AxGzZgZwpk36siaTZL8ev9vXy6726TDCtIceCzq3 USOK/GkkLpEAfQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:56 2025 by rpki-client